Integrated Infrastructure for Secure and Efficient Long-Term Data Management

为了达到法律或行业标准日益要求的企业数据的安全性和隐私性水平，数据在静态和传输中都应加密。 然而，最近通过丢失或盗窃档案磁带或笔记本电脑而发生的许多隐私泄露事件表明，今天大多数数据，即使是极其敏感的数据，也没有加密。 主要原因是我们没有灵活的密钥管理系统。 加密密钥的丢失（通过内存丢失，员工死亡或存储副本的破坏）将意味着数据的所有者将有效地完全丢失它，并可能带来灾难性的后果。该项目将开发一个高性能的长期数据管理系统，以确保数据集在整个生命周期内的必要安全水平。 目标是一个基于分层集群的归档存储解决方案，它将提供：（i）透明的备份、恢复和数据访问操作，使各个应用程序和业务实体能够安全有效地将数据归档数十年;（ii）集群计算环境中的高性能数据访问;以及（iii）有效确保长期数据安全和可访问性的创新技术，包括长期密钥管理。 该解决方案将适用于异构计算环境，包括高性能计算（HPC）社区的极高吞吐量环境。

To achieve the level of security and privacy for enterprise data that is increasingly required by laws or industry standards, data should be encrypted both at rest and in transit. Yet, numerous recent privacy breaches through loss or theft of archival tapes or notebook computers show that today most data, even of extremely sensitive nature, is not encrypted. The main reason is that we do not have a flexible system for key management. Loss of the encryption key (through lapses of memory, death of staff members, or destruction of stored copies) would mean that the owner of the data would effectively lose it completely, with potentially catastrophic consequences. This project will develop a high-performance long-term data management system that will ensure the necessary levels of security throughout the lifecycle of a data set. The goal is a hierarchical cluster-based archival storage solution that will provide: (i) transparent backup, restore, and data access operations that will allow individual application programs and business entities to securely and efficiently archive data for decades; (ii) high-performance data access in a cluster computing environment; and (iii) innovative techniques for efficiently ensuring long-term data security and accessibility, including long-term key management. The solution will be suitable for heterogeneous computing environments, including the extremely high-throughput ones of the high-performance computing (HPC) community.